Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json)
Hash identifier: +x/FiQaHyP+iAabuuWn712F2LbEvMitJTaoVLjQaM/w=
Subject key identifier: 17:8D:B6:BD:61:52:92:C9:35:3F:F3:19:E8:52:5D:27:D9:E2:B2:47
Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
Manifest number: 40
Signing time: Fri 31 Jan 2025 06:29:05 +0000
Manifest this update: Fri 31 Jan 2025 06:29:04 +0000
Manifest next update: Fri 07 Feb 2025 06:29:04 +0000
Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: xEmhgwgZwM6j//LTgjgkTnkGZ8wCai28vm3Te5TP87k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Validity
Not Before: Jan 31 06:29:04 2025 GMT
Not After : Feb 7 06:29:04 2025 GMT
Subject: CN=679c6db0-0dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6a:cc:ea:9a:69:2a:68:bb:fc:69:97:7d:5c:
d6:1d:26:9d:fb:1b:3c:e9:aa:c6:25:e8:3f:47:46:
d2:ca:26:15:c3:99:eb:c2:80:03:d0:a7:3d:76:e8:
b5:81:e6:42:46:44:b1:b6:55:aa:93:06:df:94:a0:
b6:ae:45:34:ad:e4:d1:e9:e2:02:b2:a0:af:e3:35:
9f:76:94:b2:88:35:22:4e:f5:5c:39:bd:dc:99:6f:
b5:6a:a1:09:48:bf:a4:5d:1a:98:2b:00:6d:bc:a0:
cd:3b:6b:c2:b5:5e:35:c3:ea:d7:bb:71:6b:8a:3b:
73:13:8e:5f:0c:ec:9c:19:3f:34:7a:ca:0d:26:25:
57:91:01:37:73:39:75:a1:47:ca:4e:5c:33:1a:95:
ba:b5:41:6d:15:54:15:f6:3d:40:69:42:7b:67:98:
f5:0f:53:e1:c3:7b:be:3d:87:69:9c:9f:82:9c:b6:
a2:cc:db:fc:de:85:e5:91:22:55:40:80:21:a5:c0:
5b:06:20:79:3b:2a:95:ac:7b:5b:7a:e2:f0:10:de:
ce:57:c8:87:86:09:72:2f:c1:8e:b6:7a:40:7b:d1:
3f:ed:8e:72:55:8d:9f:dd:b3:07:f8:07:a3:a0:a8:
cc:c9:4d:05:2e:bb:ac:3a:9f:4c:a6:4d:da:ce:19:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:B6:BD:61:52:92:C9:35:3F:F3:19:E8:52:5D:27:D9:E2:B2:47
X509v3 Authority Key Identifier:
keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:d6:5a:c8:ec:e8:07:0e:8e:30:23:32:c9:38:ce:8f:dc:51:
76:15:83:16:94:da:c4:9f:69:6d:34:ab:14:cb:82:ad:43:a6:
07:7f:02:bb:ab:56:e3:52:39:86:54:0c:e3:73:a7:e1:76:38:
95:46:5f:dc:ae:81:6a:cd:14:54:0e:10:2a:54:63:83:15:43:
20:13:a5:ba:5b:ed:06:00:77:d7:c6:bd:1d:95:37:c7:ad:2d:
0c:0d:60:be:00:44:b6:8b:b1:07:51:d8:c4:e0:8e:2e:ab:74:
27:aa:cf:b5:88:e8:1d:3f:3b:11:08:44:03:10:53:2b:b8:91:
c7:9a:9c:19:d8:ef:4b:04:67:74:e1:f2:40:fd:16:27:a6:e0:
bd:55:36:57:89:c8:ec:6f:07:3a:8b:2a:30:43:17:91:46:6d:
aa:17:a3:70:da:8e:4d:1c:61:07:45:99:35:7d:0a:94:e1:49:
55:fc:b5:b6:22:e1:77:1e:17:a1:96:f0:2c:68:bf:6d:3d:cc:
97:42:b8:80:f3:4e:e8:d8:7d:4f:f0:2a:bd:49:be:c2:c3:66:
ab:ff:2c:0f:27:71:99:6e:c0:71:fb:23:29:36:12:7a:ee:60:
96:b7:4e:ca:60:2e:2d:71:ce:55:a4:24:ce:16:71:4d:82:4e:
75:1c:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:35:22 2025 by rpki-client